Tom is a seasoned executive of Cyber and Technology Risk, providing oversight, effective challenge and governance. He has 15+ years of Information Security, Cyber and Technology risk experience and has assisted clients in the US and Australia across various industries and geographies to overcome a broad range of security, technology, and regulatory challenges. He has assisted clients with finding pragmatic ways to manage risk, focused on risk efforts that have the most impact. He has experience in developing robust security strategies, managing audits, developing 2nd line cyber risk management functions, performing deep dive technical reviews and assessments, consulting on compliance and general security risk, while working with the business to enable their needs and functions. He had been recognized by leadership and customers for his focus on being pragmatic and using strong risk judgement.At Capital One he lead the 2nd line oversight function for Cyber and Technology Risk. His team team provides oversight and effective challenge for Capital One related to traditional cyber domains (vulnerability management, application security, SOC, IAM, DLP), Capital One's usage, governance, and management of the public cloud (AWS, GCP, and Azure), technology resilience, and change management. Prior to this role, he led Capital One's Application Security team growing the function significantly, working to mature the program via automation of manual testing and to embed security principles into the SDLC. Tom additionally has served as the Divisional Information Security Officer for Capital One's Commercial Bank where his efforts focused on assuring the business needs were met via focusing on threat modeling, vulnerability testing and remediation, and designing secure platforms for Capital One’s Commercial Bank customers. Tom was one of PwC’s subject matter specialists in attack and penetration, security investigations, and security assessment services. His passion for information security has led him to be respected as an Information Security and Cyber subject matter expert. Tom's goal is to help make organizations more secure, while providing realistic, practical, and pragmatic solutions for the business to problems in complex environments.